| Package | Affected versions | Patched versions |
|---|---|---|
| appliance | = 3.10.0= 3.10.1= 3.4.0= 3.5.0= 3.5.1= 4.0.0= 4.1.0= 4.2.0= 4.3.0= 4.3.1= 4.4.0 |
Tenable Appliance 3.5 - 4.4.0, and possibly prior versions, contains a flaw in the simpleupload.py script in the Web UI. Through the manipulation of the tns_appliance_session_user parameter, a remote attacker can inject arbitrary commands.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free